API user for querying snapshotse

I am using kopia server running under a privileged account. How could I create an API user that is allowed to see all the snapshots?

I’ve created a user api@backuphost but when I use this user to access https://backuphost.an:51515/api/v1/snapshots I do get a

2024-10-14 12:09:31,116 - ERROR - Fehler bei der API-Anfrage: 403 {
  "code": "ACCESS_DENIED",
  "error": "access is denied"
}

The user also has an ACL that should grant him access

id:someid user:api@backuphost access:READ target:type=snapshot